Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/289C0FA8F74E8A496A1CF040353916504C4E789F.cer
File:                     289C0FA8F74E8A496A1CF040353916504C4E789F.cer (raw, json)
Hash identifier:          ZqKqT5Bw40FO7i3HePTBx85AsBReBj82nC4crS+HKMU=
Subject key identifier:   28:9C:0F:A8:F7:4E:8A:49:6A:1C:F0:40:35:39:16:50:4C:4E:78:9F
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       7E7B2442AAE67B9FE3A9D9262732E7C9A84E2E04
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/51pWNsyi1szHmRyh9qDneyiYHPnnKHdjXSi71PRy2jac/0/289C0FA8F74E8A496A1CF040353916504C4E789F.mft
caRepository:             rsync://rpki-repo.registro.br/repo/51pWNsyi1szHmRyh9qDneyiYHPnnKHdjXSi71PRy2jac/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 05 Mar 2026 14:58:14 +0000
Certificate not after:    Thu 04 Mar 2027 15:03:14 +0000
Subordinate resources:    AS: 267078
                          IP: 45.228.148.0/22
                          IP: 2804:47d0::/32
Validation:               Failed, certificate revoked on Thu 19 Mar 2026 17:44:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:7b:24:42:aa:e6:7b:9f:e3:a9:d9:26:27:32:e7:c9:a8:4e:2e:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar  5 14:58:14 2026 GMT
            Not After : Mar  4 15:03:14 2027 GMT
        Subject: CN=289C0FA8F74E8A496A1CF040353916504C4E789F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:b3:a7:71:b2:a1:3a:90:34:af:78:bc:06:e4:
                    41:51:b4:4d:14:fb:bd:70:1c:77:ce:9b:c2:4b:26:
                    5f:6c:38:03:d5:17:e4:de:5a:21:6d:3b:38:ff:fd:
                    45:be:f9:7f:97:f9:4b:1e:46:d2:e9:2a:fe:91:41:
                    fb:b6:ee:0a:2f:bc:b8:9a:2d:4d:81:ca:87:e7:cf:
                    b1:b1:d9:c5:a5:d8:b5:fa:2b:f5:40:c1:06:38:89:
                    6a:b8:92:87:1d:ab:61:54:a5:57:61:54:85:ce:61:
                    b3:ee:f1:34:2f:5c:94:a8:8b:be:92:49:13:51:88:
                    d0:4a:10:1a:4f:8d:60:49:07:36:94:f2:6d:29:f5:
                    86:59:ec:39:fd:34:85:d2:f3:fd:4b:1a:ff:f8:0c:
                    28:fb:75:62:cc:84:74:b5:d8:9e:12:96:64:f6:7a:
                    da:24:50:8d:f5:2b:d1:51:1a:5a:4d:52:a3:79:25:
                    e9:c1:87:4e:3f:19:d4:bf:a5:84:d8:f5:af:4e:78:
                    a6:91:0c:80:37:26:c8:34:8b:83:52:6c:3e:0f:26:
                    b4:07:b2:b6:bf:fe:e4:14:85:19:d2:a2:dd:98:a2:
                    6c:f8:bd:1a:c0:74:05:89:91:65:ff:bd:5e:f1:3e:
                    89:04:91:0e:ba:99:b0:00:69:f1:70:53:d1:5c:50:
                    41:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                28:9C:0F:A8:F7:4E:8A:49:6A:1C:F0:40:35:39:16:50:4C:4E:78:9F
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/51pWNsyi1szHmRyh9qDneyiYHPnnKHdjXSi71PRy2jac/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/51pWNsyi1szHmRyh9qDneyiYHPnnKHdjXSi71PRy2jac/0/289C0FA8F74E8A496A1CF040353916504C4E789F.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.228.148.0/22
                IPv6:
                  2804:47d0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267078

    Signature Algorithm: sha256WithRSAEncryption
         db:95:3c:28:07:4b:94:62:19:1d:e4:1f:62:11:c2:64:4f:b3:
         34:26:fe:12:2a:e4:48:37:53:e3:5e:16:6a:90:0b:6f:6c:eb:
         bb:49:77:45:e2:86:c3:67:f0:1a:93:81:31:14:a0:90:8c:ce:
         6d:e4:f6:81:7e:87:66:e2:6a:47:d6:5a:b1:c4:32:1d:f3:24:
         12:00:12:96:70:11:ac:02:c2:79:09:da:87:ed:62:eb:0e:7e:
         1c:78:48:37:9e:d8:b8:c9:87:0d:44:45:29:ed:2d:f7:93:ec:
         33:f5:79:b8:2c:d2:db:8f:fd:7a:b9:90:18:ba:4d:3f:91:9b:
         b1:63:bd:4e:34:d7:cd:41:d9:6e:ea:b2:96:1e:e8:40:2c:8b:
         4b:8c:d9:2c:04:b3:5c:dd:5a:84:91:da:3a:58:ac:47:21:5a:
         40:aa:55:76:18:99:bd:f9:a3:e2:b8:3e:d7:37:8a:bd:7e:63:
         47:53:9f:dc:1e:66:11:b9:ad:57:e1:cc:b2:c9:51:fa:03:92:
         af:38:a0:cd:46:3a:f9:5e:d3:9c:6d:c5:9f:58:65:be:6a:4a:
         fd:54:8a:76:df:2d:e7:3d:97:20:94:0d:90:05:8d:3b:ed:22:
         5c:e5:38:57:d1:51:2f:00:f8:e0:7d:79:9c:d2:48:21:be:df:
         65:90:75:ba
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUfnskQqrme5/jqdkmJzLnyahOLgQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNjAzMDUxNDU4MTRaFw0yNzAzMDQxNTAzMTRaMDMxMTAvBgNV
BAMTKDI4OUMwRkE4Rjc0RThBNDk2QTFDRjA0MDM1MzkxNjUwNEM0RTc4OUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQs6dxsqE6kDSveLwG5EFRtE0U
+71wHHfOm8JLJl9sOAPVF+TeWiFtOzj//UW++X+X+UseRtLpKv6RQfu27govvLia
LU2Byofnz7Gx2cWl2LX6K/VAwQY4iWq4kocdq2FUpVdhVIXOYbPu8TQvXJSoi76S
SRNRiNBKEBpPjWBJBzaU8m0p9YZZ7Dn9NIXS8/1LGv/4DCj7dWLMhHS12J4SlmT2
etokUI31K9FRGlpNUqN5JenBh04/GdS/pYTY9a9OeKaRDIA3Jsg0i4NSbD4PJrQH
sra//uQUhRnSot2Yomz4vRrAdAWJkWX/vV7xPokEkQ66mbAAafFwU9FcUEHNAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQonA+o906KSWoc
8EA1ORZQTE54nzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNTFw
V05zeWkxc3pIbVJ5aDlxRG5leWlZSFBubktIZGpYU2k3MVBSeTJqYWMvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzUx
cFdOc3lpMXN6SG1SeWg5cURuZXlpWUhQbm5LSGRqWFNpNzFQUnkyamFjLzAvMjg5
QzBGQThGNzRFOEE0OTZBMUNGMDQwMzUzOTE2NTA0QzRFNzg5Ri5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCLeSUMA0EAgACMAcDBQAoBEfQMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQTRjANBgkqhkiG9w0BAQsFAAOCAQEA25U8KAdLlGIZHeQf
YhHCZE+zNCb+EirkSDdT414WapALb2zru0l3ReKGw2fwGpOBMRSgkIzObeT2gX6H
ZuJqR9ZascQyHfMkEgASlnARrALCeQnah+1i6w5+HHhIN57YuMmHDURFKe0t95Ps
M/V5uCzS24/9ermQGLpNP5GbsWO9TjTXzUHZbuqylh7oQCyLS4zZLASzXN1ahJHa
OlisRyFaQKpVdhiZvfmj4rg+1zeKvX5jR1Of3B5mEbmtV+HMsslR+gOSrzigzUY6
+V7TnG3Fn1hlvmpK/VSKdt8t5z2XIJQNkAWNO+0iXOU4V9FRLwD44H15nNJIIb7f
ZZB1ug==
-----END CERTIFICATE-----
Generated at Wed Apr 8 12:38:09 2026 by rpki-client